banner privacy & security compliance statement - Stephen F. Austin ...

Staff granted access to Banner student institutional databases or batch files agree to:
Comply with all data standards policies as presented in the Guidelines for Data
Standards, Data Integrity and Security ;
Comply with the Student Records (D-13), Gramm Leach Bliley Required Information
Security (D-54), Identity Theft Prevention (C-60), and all other applicable policies and
procedures relating to the possession, security and transfer of student educational and
financial records;
Store information under secure conditions;
Make every effort to ensure students’ privacy;
Destroy information when it is no longer needed in compliance with the University’s
record retention policy;
Use information only as described in the request for data or access to institutional
database files;
Release information to a third party only if authorized approval is given and in accordance
with this Compliance Statement, University policy, and state and/or federal law;
Never represent summary data from files as “official” University data.
Violations. Violation of Federal law or University policy constitutes grounds for rescinding access
to Banner records or imposing disciplinary action, up to and including dismissal. Violations
include the following offenses and any other comparable action:
Not adhering to data standards guidelines as presented in the Guidelines for Data
Standards, Data Integrity and Security
Not complying with the Student Records (D-13), Gramm Leach Bliley Required
Information Security (D-54), Identity Theft Prevention (C-60), and all other applicable
policies and procedures relating to the possession, security and transfer of student
educational and financial records;
Releasing public information about a student whose information was requested on the
basis of non-public information (e.g., names of all international students, name of all
students with a GPA lower than 2.0);
Altering a student’s record without appropriate supporting documentation/authorization.
Accessing a student record outside of your assigned duties;
Releasing suppressed or non-public/directory information without authorization;
Publicly discussing a student’s record in a way that might personally identify that student;
Sharing computer security passwords.
I have read this compliance statement and agree to the conditions and terms outlined herein.
Name (Please Print)
Department
Campus ID Number (CID)
Date
Signature
Title
Approved by General Counsel 07/09